NG2文件上传访问控制起源问题

Question

我已经使用这个库angular2文件上传https://github.com/valor-software/ng2-file-upload

现在我得到这个错误，当我上传文件

XMLHttpRequest cannot load http://localhost:8080/files. Response to preflight request doesn't pass access control check: The value of the 'Access-Control-Allow-Origin' header in the response must not be the wildcard '*' when the request's credentials mode is 'include'. Origin 'http://localhost:3000' is therefore not allowed access. The credentials mode of requests initiated by the XMLHttpRequest is controlled by the withCredentials attribute. 

Answer 1

您的服务器响应具有以下CORS Header

'Access-Control-Allow-Credentials' = true 

这是一个安全性CORS提供，你不能这样做。您不能使用Access-Control-Allow-Origin = *如果您允许凭据。你将不得不指定确切的域名。尝试指定

localhost:<portnumber> 

欲了解更多信息，看看下面的链接

1. Access-Control-Allow-Origin wildcard subdomains, ports and protocols
2. Cross Origin Resource Sharing with Credentials
3. CORS: Cannot use wildcard in Access-Control-Allow-Origin when credentials flag is true

Answer 2

让withCredentials = false上传项目之前。您可以将此代码放入ngOnInit/constructor或ngOnChanges。

this.uploader.onBeforeUploadItem = (item) => { 
    item.withCredentials = false; 
}